EvalGate HTTP Tool API
An authenticated, read-only-by-default API for agent inspection. This endpoint is not an MCP server and cannot be used as an MCP client transport.
GET /api/mcp/tools
Returns the read-only tools available to the authenticated organization. A bearer token witheval:read is required; tool discovery is not public.
eval.quality.latest, eval.get, and eval.list are returned. The response is tenant-bound and private. Operators may set EVALGATE_TOOL_API_WRITES=true to advertise mutation tools, which still require their authenticated write scopes. Keep the flag disabled for read-only access.
POST /api/mcp/call
Executes one of the discovered tools. A write-capable tool returns403 Forbidden unless EVALGATE_TOOL_API_WRITES=true and the authenticated caller has its Required write scope.